MFA Code for IAM users

When you assign an MFA to an IAM user, it needs to scan the code. So how do you do that? I understand that the actual user should scan that QR code with its own cel phone in order to be able to generate the MFA code later. Is that right or am I missing the procedure here?

  • post-author-pic
    Fernando M
    10-18-2018

    Yep! That is correct. The AWS IAM user would use their own phone (or work provided phone) to scan the QR code with something like Google Authenticator and then from then on, the MFA would be on their device. There are some more details on this here - https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_virtual.html

    Hope this helps!

  • post-author-pic
    Richard L
    10-18-2018

    Don't forget to backup your Authenticator in case your lose your phone!

  • post-author-pic
    Jeremias L
    10-19-2018

    Thanks for your help guys !

Looking For Team Training?

Learn More